Robust Quantum Algorithms with ^-Biased Oracles 



Tomoya Suzuki Shigeru Yamashita Masaki Nakanishi 

Katsumasa Watanabe 
Graduate School of Information Science, Nara Institute of Science and Technology 
{tomoya-s, ger, m-naka, watanabe}@is .naist . jp 



OO 



X 



Abstract 

This paper considers the quantum query complexity of e-biased oracles that return the correct 
value with probability only 1/2 + e. In particular, we show a quantum algorithm to compute iV-bit 
OR functions with 0(y/N /e) queries to e-biased oracles. This improves the known upper bound of 
0(y/~N /e 2 ) and matches the known lower bound; we answer the conjecture raised by the paper [T3| 
affirmatively. We also show a quantum algorithm to cope with the situation in which we have no 
knowledge about the value of e. This contrasts with the corresponding classical situation, where it 
is almost hopeless to achieve more than a constant success probability without knowing the value 
of e. 



1 Introduction 



> : 

, Quantum computation has attracted much attention since Shor's celebrated quantum algorithm for 
factoring large integers £T5] and Grover's quantum search algorithm One of the central issues in 
■ this research field has been the quantum query complexity, where we are interested in both upper and 
lower bounds of a necessary number of oracle calls to solve certain problems ^ El EJ El El 151 114j. In 
these studies, oracles are assumed to be perfect, i.e., they return the correct value with certainty. 

In the classical case, there have been many studies (e.g., ^Uj) that discuss the case of when oracles 
are imperfect (or often called noisy), i.e., they may return incorrect answers. In the quantum setting, 
Hoyer et al. proposed an excellent quantum algorithm, which we call the robust quantum search 
algorithm hereafter, to compute the OR function of N values, each of which can be accessed through a 
quantum "imperfect" oracle. Their quantum "imperfect" oracle can be described as follows: When the 
qh| content of the query register is x (1 < x < N), the oracle returns a quantum pure state from which 
we can measure the correct value of f{x) with a constant probability. This noise model naturally 
fits into quantum subroutines with errors. (Note that most existing quantum algorithms have some 
errors.) More precisely, their algorithm robustly computes iV-bit OR functions with 0{yN) queries 
to an imperfect oracle, which is only a constant factor worse than the perfect oracle case. Thus, they 
claim that their algorithm does not need a serious overhead to cope with the imperfectness of the 
oracles. Their method has been extended to a robust quantum algorithm to output all the N bits by 
using O(N) queries [Hj by Buhrman et al. This obviously implies that O(N) queries are enough to 
compute the parity of the N bits, which contrasts with the classical Q(NlogN) lower bound given 
in [TOJ. 

It should be noted that, in the classical setting, we do not need an overhead to compute OR 
functions with imperfect oracles either, i.e., 0(N) queries are enough to compute JV-bit OR functions 
even if an oracle is imperfect J01- Nevertheless, the robust quantum search algorithm by Hoyer et 
al. ^2] implies that we can still enjoy the quadratic speed-up of the quantum search when computing 
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OR functions, even in the imperfect oracle case, i.e., 0(y/~N) vs. O(N). However, this is not true 
when we consider the probability of getting the correct value from the imperfect oracles explicitly by 
using the following model: When the query register is x, the oracle returns a quantum pure state from 
which we can measure the correct value of f{x) with probability 1/2 + e x , where we assume e < e x for 
any x and we know the value of e. In this paper, we call this imperfect quantum oracle an e-biased 
oracle (or a biased oracle for short) by following the paper JHj- Then, the precise query complexity 
of the above robust quantum search algorithm to compute OR functions with an e-biased oracle can 
be rewritten as 0(y/~N /e 2 ), which can also be found in j^j. For the same problem, we need 0(N/e 2 ) 
queries in the classical setting since 0(1/ e 2 ) instances of majority voting of the output of an e-biased 
oracle is enough to boost the success probability to some constant value. This means that the above 
robust quantum search algorithm does not achieve the quadratic speed-up anymore if we consider the 
error probability explicitly. 

Adcock et al. [2] first considered the error probability explicitly in the quantum oracles, then 
Iwama et al. ^3] continued to study e-biased oracles: they show the lower bound of computing OR 
is £l(y/~N/e) and the matching upper bound when e x are the same for all x. Unfortunately, this 
restriction to oracles obviously cannot be applied in general. Therefore, for the general biased oracles, 
there have been a gap between the lower and upper bounds although the paper JHj conjectures that 
they should match at Q(\/ r N /e). 

Our Contribution. In this paper, we show that the robust quantum search can be done with 
0(y/N /e) queries. Thus, we answer the conjecture raised by the paper |13j affirmatively, meaning that 
we can still enjoy the quantum quadratic speed-up to compute OR functions even when we consider 
the error probability explicitly. The overhead factor of 1/e 2 in the complexity of the original robust 
quantum search (i.e., 0{yN /e 2 )) essentially comes from the classical majority voting in their recursive 
algorithm. Thus, our basic strategy is to utilize quantum amplitude amplification and estimation [Jj 
instead of majority voting to boost the success probability to some constant value. This overall 
strategy is an extension of the idea in the paper |T3] , but we carefully perform the quantum amplitude 
amplification and estimation in quantum parallelism with appropriate accuracy to avoid the above- 
mentioned restriction to oracles assumed in |13j . 

In most existing (classical and quantum) algorithms with imperfect oracles, it is implicitly assumed 
that we know the value of e. Otherwise, it seems impossible to know when we can stop the trial of 
majority voting with a guarantee of a more than constant success probability of the whole algorithm. 
However, we show that, in the quantum setting, we can construct a robust algorithm even when e 
is unknown. More precisely, we can estimate unknown e with appropriate accuracy, which then can 
be used to construct robust quantum algorithms. Our estimation algorithm also utilizes quantum 
amplitude estimation, thus it can be considered as an interesting application of quantum amplitude 
amplification, which seems to be impossible in the classical setting. 

2 Preliminaries 

In this section, we introduce the quantum computing and the query complexity. We also define 
quantum biased oracles. 

2.1 Quantum State and Evolution 

A state of n-qubit quantum register is a superposition of 2™ classical strings with length n, i.e., 
\ip) = Ylx a x\ x ) wriere x ^ {0,1}™ and the amplitudes a x are complex numbers consistent with the 
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normalization condition: ^2 X \ a x \ 2 = 1. If we measure the state \ip) with respect to the standard basis, 
we observe \x) with probability \a x \ 2 and after the measurement the state collapses into \x). 

Without measurements, a quantum system can evolve satisfying the normalization condition. 
These evolutions are represented by unitary transformations. The following Fourier transform is 
a famous example that acts on several qubits. 

Definition 1 For any integer M > 1, a quantum Fourier transform Fm is defined by 

M-l 



1 l x > -7fjH e2nlXV/M \y) (0<^<M). 
VM y=o 



In this paper, unitary transformations controlled by other registers are often used. For example, one 
of them acts as some unitary transformation if the control qubit is |1), otherwise it acts as identity. 
The following operator Am is also one of their applications. 



Definition 2 For any integer M > 1 and any unitary operator U, the operator Am(U) is defined by 

\j)\y) - 



|j)U%> (0<j<M) 
\j)\5 M \y) (j>M). 



Am is controlled by the first register \j) in this case. Am(U) uses U for M times. 

It is also known that quantum transformations can compute all classical functions. Let g be any 
classically computable function with m input and k output bits. Then, there exists a unitary trans- 
formation U g corresponding to the computation of g: for any x G {0, l} m and y G {0, l} k , XJ g maps 
\x)\y) to \x)\y © g(x)}, where © denotes the bitwise exclusive-OR. 



2.2 Query Complexity 

In this paper, we are interested in the query complexity, which is discussed in the following model. 
Suppose we want to compute some function T with an A/"-bit input and we can access each bit only 
through a given oracle O. The query complexity is the number of queries to the oracle. A quantum 
algorithm with T queries is a sequence of unitary transformations: Uq — > 0\ — > XJ\ — > . . . — > Ot — ► Ut, 
where Oi denotes the unitary transformation corresponding to the i-th query to the oracle O, and Ui 
denotes an arbitrary unitary transformation independent of the oracle. Our natural goal is to find 
an algorithm to compute T with sufficiently large probability and with the smallest number of oracle 
calls. 

The most natural quantum oracles are quantum perfect oracles Of that map |x)|0 m_1 )|0) to 
|x)|0 m ~ 1 )|/(a;)) for any x G [N]. Here, lO" 1 ^ 1 ) is a work register that is always cleared before and after 
querying oracles. On the other hand, quantum biased oracles, which we deal with in this paper, are 
defined as follows. 

Definition 3 A quantum oracle of a Boolean function f with bias e is a unitary transformation Of 
or its inverse O 6 ^ such that 

0}|x)|0 m - 1 )|0) = |x)(a :E | U ; a; )|/(x)) + /3 :E |O|7M)), 
where \a x \ 2 = 1/2 + e x > 1/2 + e for any x G [N]. Let also e m - m = mme x . 
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Note that < e < 

£min ^ &x ^ 1/2 for any x. In practice, e is usually given in some way and e m ; n 
or e x may be unknown. Unless otherwise stated, we discuss the query complexity with a given biased 
oracle O e j in the rest of the paper. 

We can also consider phase flip oracles instead of the above-defined bit flip oracles. A (perfect) 
phase flip oracle is defined as a map: |x)|0 m_1 ) i — ► (— l)f^\x)\O m ~ 1 ) , which is equivalent to the 
corresponding bit flip oracle Of in the perfect case, since either oracle can be easily simulated by the 
other oracle with a pair of Hadmard gates. In a biased case, however, the two oracles cannot always 
be converted to each other. We need to take care of interference of the work registers, i.e., \w x ) and 
\w' x ), which are dealt with carefully in our algorithm. 

2.3 Amplitude Amplification and Estimation 

We briefly introduce a few known quantum algorithms often used in the following sections. In [7j, 
Brassard et al. presented amplitude amplification as follows. 

Theorem 1 Let A be any quantum algorithm that uses no measurements and x : 2^ ^ {0, 1} be any 
Boolean function that distinguishes between success or fail (good or bad). There exists a quantum 
algorithm that given the initial success probability p > of A, finds a good solution with certainty 
using a number of applications of A and A' 1 , which is in 0(— p) in the worst case. 

In the amplitude amplification, a unitary operator Q = — _4So»4 -1 S x is used. Here, So denotes an 
operator to flip the sign of amplitude of the state |0), and S x denotes an operator to flip the signs of 
amplitudes of all the good states. Applying Q to the state «4|0) for j times, we have 

QU|0) = -Uin((2j + l)9 p ) |%) + — l=cos((2j + 1)9 p ) |tf ), 
VP \A -P 

where has all the good states, and (^ , i|\E'i) = p = sin 2 (# p ) and is orthogonal to |^o)- After 
applying Q for about tt/A9 p G 0(1/ y/p) times, we can measure a good solution with probability close 
to 1. Note that we need to know information about the value of p in some way to do so. See j7] for 
more details. 

Brassard et al. also presented amplitude estimation in We rewrite it in terms of phase 
estimation as follows. 

Theorem 2 Let A,x an d p be as in Theorem^ and 9 P = sin (y'p) such that < 9 p < ir/2. 
There exists a quantum algorithm Est-Phase(A,x> M) that outputs 9 P such that \9 P — 9 p \ < j?, with 
probability at least 8/7r 2 . It uses exactly M invocations of A and x, respectively. If 9 P = then 9 P = 
with certainty, and if 9 p = tt/2 and M is even, then 9 P = tt/2 with certainty. 



3 Computing OR with e-Biased Oracles 

In this section, we assume that we have information about bias rate of the given biased oracle: a value 
of g such that < e < e m i n . Under this assumption, in Theorem we show that A^-bit OR functions 
can be computed by using 0(V~N /e) queries to the given oracle Oj. Moreover, when we know gmin? 
we can present an optimal algorithm to compute OR with O e j. Before describing the main theorem, 
we present the following key lemma. 

1 /6 

Lemma 1 There exists a quantum algorithm that simulates a single query to an oracle O j by using 
0(l/e) queries to Or if we know e. 
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To prove the lemma, we replace the given oracle with a new oracle Oj for our convenience. The 
next lemma describes the oracle and how to construct it from O^. 

Lemma 2 There exists a quantum oracle that consists of one O e j and one Oy such that for any 
x E [N] 

O £ f \x,0 m ,0) = (-l)K x he x \x,0 m ,0) + \x,4> x ), (1) 
where \x,tp x ) is orthogonal to |x,0 m ,0) and its norm is \/l — ^e x 2 . 

Proof. We can show the construction of O e j in a similar way in Lemma 1 in JH]- 

□ 

Now, we describe our approach to Lemma ^ The oracle O 1 ^ 6 is simulated by the given oracle 
Of based on the following idea. According to if the query register \x) is not in a superposition, 
phase flip oracles can be simulated with sufficiently large probability: by using amplitude estimation 
through Of , we can estimate the value of e x , then by using the estimated value and applying amplitude 
amplification to the state in we can obtain the state (— l)^ x ^\x, m , 0) with high probability. In 
Lemma^ we essentially simulate the phase flip oracle by using the above algorithm in a superposition 
of Note that we convert the phase flip oracle into the bit flip version in the lemma. 

We will present the proof of Lemma ^ after the following lemma, which shows that amplitude 
estimation can work in quantum parallelism. Est_Phase in Theorem [21 is straightforwardly extended 
to Par_Est-Phase in Lemma El whose proof can be found in the Appendix. 

Lemma 3 Let x : Z ^ {0, 1} be any Boolean function, and let O be any quantum oracle that uses no 
measurements such that 

O\x)\0) = \x)O x \0) = \x)\* x ) = + 

where a state \^ x ) is divided into a good state \^ x ) and a bad state |*°.) by \. Let sin 2 (0 x ) = 
(*^|*^) be the success probability of O x \0) where < 6 X < tt/2. There exists a quantum algorithm 
Par_Est_Phase(0,x,M) that changes states as follows: 

Af-l 

|x)|0)|0) i — ► \x) <g> $x,j\v x ,j}\dx,j), 
i=o 

where l^,j| 2 — ~ f or an ^ x ' an< ^ \ Vx ^ an ^ \ Vx j) are mu ^ ua ^V orthonormal vectors for 

r-\6x-§xj\<jt 

any It uses O and its inverse for O(M) times. 

Proof, (of Lemma ^) 

We will show a quantum algorithm that changes states as follows: 

|s)|0)|0) \x)(a x \w x )\f(x)) + P x \w' x )\W))), 

where \a x \ 2 > 2/3 for any x, using 0(l/e) queries to Oj. The algorithm performs amplitude amplifi- 
cation following amplitude estimation in a superposition of \x). 
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At first, we use amplitude estimation in parallel to estimate e x or to know how many times the 
following amplitude amplification procedures should be repeated. Let sin0 = 1e and sin0 x = 2e x 
such that < 9,9 X < tt/2. Note that 0(0) = 6(e) since sin0 < < § sin0 when < < vr/2. 



Let also M\ 



37r(7T + l) 



and x be a Boolean function that divides a state in (pQ) into a good state 

(— l)^^)2e x |0 m+1 ) and a bad state The function \ checks only whether the state is |0 m+1 ) or 

not; therefore, it is implemented easily. By Lemma |3J Par_Est-Phase(Oj,x^i) maps 



|x)|0)|0)|0) 



M-l 

\x) <g> £ 5 x j\v x j)\6 x j}\0), 



where 



I e |2 



j=0 

8 



> — 2 for any x, and and \v x j) are mutually orthonormal vectors 



7T 



E 

for any This state has the good estimations of 6 X in the third register with high probability. The 
fourth register |0) remains large enough to perform the following steps. 

The remaining steps basically perform amplitude amplification by using the estimated values 9 x j, 
which can realize a phase flip oracle. Note that in the following steps a pair of Hadmard transformations 
are used to convert the phase flip oracle into our targeted oracle. 



Based on the de-randomization idea as in ^3] , we calculate 



m 



1 



p" x j = sin 2 (0* J ) and p x j = sin 2 (9 x j) in the superposition, and apply an Hadmard transformation to 



the last qubit. Thus we have 
,M-\ 

w) i £ 5 -A^0^)\^XM,Mj)\p^ ® |o m+1 )|o) ® 



j=0 



V2 



(|0> + |1» 



Next, let R : |p*,}|p X j)|0> -» \pl ,) |p X j) 




1) I be a rotation and let O = Oj®R 



be a new oracle. We apply O followed by Am 2 (Q), where M2 = 5 ^ 2(3^+2)0 + an< ^ Q = — ^(I (g) 
So)0 (I(g> S x ); So and S x are defined appropriately. Aa/ 2 is controlled by the register |m* j), and Q 
is applied to the registers |x) and |0 m+1 )|0) if the last qubit is |1). Let O x denote the unitary operator 
such that O|x)|0 m+1 )|0) = |x)O :r |0 m+1 )|0). Then we have the state (From here, we write only the 
last three registers.) 



M-l 



£ ^ (|0 m+1 )|0)|0) + QT'O,. (|0 m+1 )|0)) |1)) 



(2) 



where Q x = — O^SoO^, S x and m x j = min(m* ■, M2) for any x,j. We will show that the phase flip 

oracle is simulated if the third register \9 X j) has the good estimation of 9 X and the last register has 
|1). Equation (J2J) can be rewritten as 

M-l <j / \ 

£ 7f (l° m+1 '°)l°) + ((-l) /W 7^|0 m+1 ,0) + |^->) |1)J, 



where \<p x j) is orthogonal to |0 m+1 ,0) and its norm is y^~l x j- Suppose that the third register has 
\9 x ,j) such that \9 X — 9 x j\ < 3 (^j_ 1 ) ■ It can be seen that m x j < M2 if \9 X — 9 x j\ < ■ Therefore, 
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Q x is applied for to* • times, i.e., the number specified by the fourth register. Like the analysis of 



Lemma 2 in |13j . it is shown that j x j > <J 1 — |. 

Finally, applying an Hadmard transformation to the last qubit again, we have the state 



M-l 



E^T (l + (-l) /(a:) 7,j)|0- +2 }|0) 



3=0 



+ (i - (-i)^) 7xJ )|o^)|i) + i^xio) - |i» I . 



vm+2 



If we measure the last qubit, we have \ f(x)) with probability 

M-l ( 



> 



£ 

j=0 

1 



+ 



E 



|4j| 2 (1 + 7xj) > 



j = l^-^,jl< 3^-j^ 



Thus, the final quantum state can be rewritten as \x)(a x \w x )\f(x)) + f3 x \w' x )\f(x)), where |ctr| 2 > 2/3 
for any x. 

The query complexity of this algorithm is the cost of amplitude estimation Mi and amplitude 
amplification M2, thus a total number of queries is O(^) = O(-). Therefore, we can simulate a single 

query to O^ 6 using 0(j) queries to Oj. □ 

□ 



Now, we describe the main theorem to compute OR functions with quantum biased oracles. 

Theorem 3 There exists a quantum algorithm to compute N-bit OR with probability at least 2/3 
using 0{y/N /e) queries to a given oracle if we know e. Moreover, if we know e m i n; the algorithm 

uses 0(V^V/e m in) queries. 

Proof. The upper bound 0(y/N je) is obtained by Lemma^a^d t 12_. In |12j . we can see an algorithm 
to compute OR with probability at least 2/3 using 0(\/~N) queries to an oracle O^ 6 . When an oracle 

1 /6 

Of and a value of e are given, we can simulate one query to an oracle Cy using 0(1/ e) queries to 

by LemmaEl Therefore, we can compute OR using 0(s/N /e) queries to an oracle O e j. 

The lower bound fl(yN /e m in) is also obtained by Theorem 6 in JH]- The theorem states that for 
any problem, if the lower bound f2(T) can be shown by Ambainis' method in the noiseless case, then 
the lower bound 0,(T/e m i n ) can also be shown in the noisy case. For computing iV-bit OR functions, 
Q(y/~N) can be shown by Ambainis' method; therefore, we can derive Q(\/ r N/e m i n ) in the quantum 
biased setting. □ 

□ 



4 Estimating Unknown e 

In Sect 03 we described algorithms by using a given oracle Oj when we know e. In this section, we 
assume that there is no prior knowledge of e. 
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Our overall approach is to estimate e with appropriate accuracy (in precise e m i n ) in advance, 
which then can be used in the simulating algorithm in Lemma H In the following, we first describe 
an overview of our strategy to estimate e m { n rather informally, followed by rigorous and detailed 
descriptions. 

First, let us consider estimating e x in the same way as LemmaEJin quantum parallelism. Then, 
let M* denote the number of required oracle calls to achieve a good estimation of e x for any x. (Here, 
good means accurate enough to perform effective amplitude amplification in LemmaEI) Note that 
M* G r2(l/e m i n ), and if we know the value of e, we can set 0(l/e) as M* . However, now e is unknown, 
we estimate M* as follows. First we will construct an algorithm, A e nough) which receives an input M 
and decides whether M is the number of oracle calls to obtain a good estimation of e x . More precisely, 
A enough uses 0{M) queries and returns if the input M is large enough to estimate s x , otherwise it 
returns 1 with a more than constant probability, say, 9/10. Then, by using A en ough i n a superposition 
of \x) as in Lemma H we can obtain the state Yl x \ x ) ® (<*a:|wx)|l) + Px\u' x )\0))- When M is small, 
the condition 3x; \a x \ 2 > 9/10 holds, which means there exists x such that the estimation of e x may 
be bad. On the other hand, when M is sufficiently large, the condition Vx; \a x \ 2 < 1/10 holds, which 
means the estimation is good for any x. Our remaining essential task, then, is to know an input value 
of M at the verge of the above two cases. Note that the value is ©(l/£ m in)> which can be used as M* . 

Next, we consider an algorithm, A:heck> which can distinguish the above two cases with 0{T) 
oracle queries with a constant probability. Then, M* can be estimated by 0(TM* log log M*) queries 
by the following search technique and majority voting: We can find M* by trying A c heck along with 
exponentially increasing the input value M until .Acheck succeeds. Note that a log log M* factor is 
needed to boost the success probability of A c heck to close to 1. It should be noted that we cannot use 
robust quantum search algorithm ^2] as A c hecki since there may exist x such that \a x \ 2 ~ 1/2, which 
cannot be dealt with by their algorithm. Instead, in Lemma El we will describe the algorithm A c heck> 
which can distinguish the above two cases by using amplitude estimation querying for 0{^/N log N) 
times. Then, the whole algorithm requires 0(TM* log log M*) = O ( N \ Q g \ Q g _J_ | queries. In 

V ^min ^min J 

Lemma EJ we present an algorithm Par_Est_Zero that acts as A en ough in a superposition of \x), and 
in Lemma El we describe the algorithm Chk-AmpJDn as .Acheck- Finally, the whole algorithm to 
estimate M* is presented in Theorem 01 

Lemma 4 Let O be any quantum algorithm that uses no measurements such that O|x)|0) = = 
+ I^S))- X '■ % * {0, 1} be a Boolean function that divides a state \^ x ) into a good state 
\^x) and a bad state \^ x ) such that sin 2 (9 x ) = (^l^x) f or an V x (0 < ^ — n /ty- There exists a 
quantum algorithm Par-Est-Zero((D,x,M) that changes states as follows: 



\x)\0)\0) -» \x) ® KK)|1) + x \u' x )\O)) , 
sm 2 (M8 x ) 

where \ct x \ 2 = — » x for any x. It uses O and its inverse for O(M) times. 

M 2 sin {0 X ) 

Proof. The algorithm Par-Est-Zero{0, x, M) acts as Par-Est-Phase{0 , M) from Step^to StepEl 
and applies a unitary transformation corresponding to the following function g'{x) instead of gM{x) 
at Step El 




1 {x = 0) 
{otherwise). 
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Then, like © we have the state 



IVl — _L \ 

to|0}|l)+E<iWI°)) 

3=1 1 

- e ^1*-}(a- |0)|l) + Ea-.|i)|0))j, 



where \a±J 2 = ^w^ffi) such that = d(jj, and A xJ = d(^, 1-%) for any x,j. (Precisely 

speaking, |a^j| 2 = 1 when ■ = 0. However, A^ ^ since X ^ in this case.) Note that J^^r) 
and \^ x ) are mutually orthogonal and ) = 1. Therefore, for any x the last qubit has |1) with 

probability 

l<ol 2 l"x,ol 2 _ sin 2 (M^) 



M 2 sin 2 ( 



Par_Est_Zero(0,x, M) requires O(M) queries to O. They are used when the algorithm is working 
as Par_Est_Phase(0,x,M). □ 

□ 

Lemma 5 Let O be any quantum oracle such that O|x)|0)|0) = |x)(a x |ti; x )|l) + f3 x \u x )\0)). There 
exists a quantum algorithm Chk-Amp_Dn{0) that outputs b £ {0, 1} such that 




if 3x; \a x \ 2 > 
if Vx; \a x \ 2 < 



10 

j_ 

10 



otherwise, 

with probability at least 8/ir 2 using 0{yN log N) queries to O. 

Proof. Using 0(log N) applications of O and majority voting, we have a new oracle O' such that 

O / |x)|0)|0) = |x)(a;.K)|l)+/3;|<)|0)), 

where \a' x \ 2 > 1 — if \a x \ 2 > yjj, and \a' x \ 2 < if \a x \ 2 < j^. Note that work bits \w' x ) and \u' x ) 
are likely larger than \ w x ) and \u x ). 

Now, let A be a quantum algorithm that makes the uniform superposition J2 X \ x ) |0) |0) by the 
Fourier transform F^r and applies the oracle C. We consider (success) probability p that the last 
qubit in the final state A\0) has |1). If the given oracle O satisfies 3x; \a x \ 2 > (we call Case 1), 
the probability p is at least X (1 — j^) > On the other hand, if O satisfies Vx; \a x \ 2 < 

(we call Case 2), then the probability p < N x x = j^- We can distinguish the two cases by 
amplitude estimation as follows. 

Let Op denote the output of the amplitude estimation EstJ D hase(A, Xi TUv^l)- The whole 
algorithm Chk-Amp_Dn(0) performs Est-Phase(A, x, fllviV]) and outputs whether 6 p is greater 
than 0.68 /y/~N or not. We will show that it is possible to distinguish the above two cases by the value 
of Op. Let dp = sin -1 (y^) such that < P < vr/2. Note that x < sin -1 (a;) < vnr/2 if < x < 1. 
Theorem |21 says that in Case 1, the Est_Phase outputs 6 P such that 



5 71 I 15 0.68 

P ~ P ~ lWN ~ V 16iV " TWn > 7n ' 
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with probability at least 8/tt 2 . Similarly in Case 2, the inequality 9 P < ^= is obtained. 

Chk-Amp_Dn(0) uses O for 0(\/N log N) times since Chk-Amp-Dn(0) calls the algorithm A for 
[ll-v/iV] times and A uses O(logiV) queries to the given oracle O. □ 

□ 

Theorem 4 Given a quantum biased oracle £ p there exists a quantum algorithm Est-EpsJVIin(Oj) 
that outputs e m i n such that e m in/5vr 2 < e m - m < e m i n with probability at least 2/3. The query complexity 
of the algorithm is expected to be O f xK}£sM. log log — — ) . 

V &min tmin / 

Proof. Let sin(^) = 2e x and sin(# m i n ) = 2e m ; n such that < 9 x ,9 m i n < |. Let % a l so De a Boolean 
function that divides the state in (pQ) into a good state (—l)^ x ^2e x \0 m+1 ) and a bad state \tp x ). 
Thus Par_Est_Zero{O e j,x->M) in Lemma 0] makes the state \x) <g) (0^1^)11) + /? x |n^,)|0)) such that 

\a x \ 2 = ^2^^) • As stated below, if M G o(l/9 x ), then |a x | 2 > 9/10. We can use Chk_Amp_Dn 

to check whether there exists x such that |<Xr| 2 > 9/10. Based on these facts, we present the whole 
algorithm Est-EpsJVIin(Oj). 

Algorithm( Est-EpsJMin(Oj) ) 

1. Start with £ = 0. 

2. Increase ^ by 1. 

3. Run Chk-Amp-Dn(Par _Est_Z 'ero(Oj , %, 2 )) for (9(log£) times and use majority voting. If "1" 
is output as the result of the majority voting, then return to Step [21 

4. Output e min = \ sin (5^7). 



Now, we will show that the algorithm almost keeps running until £ > 



log 



2 50 min 



We assume 



£ < 



Under this assumption, a proposition 3x; \ a x \ 2 > yjj holds since the equation 



lo §2 w~ 

e m i n = mm x e x guarantees that there exists some x such that 9 m i n = 9 X and \a x \ 2 = 2™ s i^ 2 (e\ — 
cos 2 (||) > when 2^ < Therefore, a single Chk-Amp-Dn run returns "1" with probability at 
least 8/tt 2 . By 0(log£) repetitions and majority voting, the probability that we obtain "1" increases 
to at least 1 — Consequently, the overall probability that we return from Step El to Step El 



for any £ such that £ < 



log 



2 50 min 



is at 



least n|=i 2 j6lmm ^ (l — > |. This inequality can be 



obtained by considering an infinite product expansion of sin(x), i.e., sin(x) = ^fl^Li (1 



, 2 — j. 



at 



x 



Tv/y/b. Thus the algorithm keeps running until 



> 



±sin 



v5-2 f J - 2 



fog 2 5 



, i.e., outputs e r 



such that 



sin 



emin; with probability at least 2/3. 



We can also show that the algorithm almost stops in 
2 



< 



log 2 r^ 

"mm 



n- sin 2 (A/6>) , n-2 

• ° mCe M2 sin 2 (6) - (2M0) 2 



when < 9 < § , (o^ 



ot° (2 2^\ < 4 for any s if 2* > Therefore, in Step El "0" is returned 

Z Sin [o x ) ID *?min 

1 



with probability at least 8/tt 2 when £ > logo -w^— ■ The algorithm, thus, outputs e 
\ sin(^-) > ^p 1 with probability at least 8/tt 2 



2 3111 (5^) ^ 
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. If the algorithm runs until £ = I, its query complexity 



is 

i 

J20(2 e \fNlogNlog£) 
e=i 

since 2 1 £ ( w ^-) = . 

\ "min / \ ^min / 

Remark. As mentioned above, we have some way to deal with quantum biased oracles even if we 
have no knowledge about the given oracle's bias rate. On the other hand, in the classical biased 
setting, there seems to be no way if the value of e is unknown: Suppose that classical biased oracles 
return a correct value with probability at least 1/2 + e for each query. It is known that by using 
0(1/ e 2 ) queries and majority voting, the probability that oracles answer queries correctly increases 
to 2/3. However, this algorithm works effectively when we know s. In other words, unless we know 
e, it is likely impossible to determine an appropriate number of majority voting to achieve at least a 
constant success probability of the whole algorithm. 

5 Conclusion 

In this paper, we have shown that 0(y/N /e) queries are enough to compute iV-bit OR with an e-biased 
oracle. This matches the known lower bound while affirmatively answering the conjecture raised by 
the paper |13j . The result in this paper implies other matching bounds such as computing parity 
with Q(N/e) queries. We also show a quantum algorithm that estimates unknown value of e with an 
e-biased oracle. Then, by using the estimated value, we can construct a robust algorithm even when 
e is unknown. This contrasts with the corresponding classical case where no good estimation method 
seems to exist. 

Until now, unfortunately, we have had essentially only one quantum algorithm, i.e., the robust 
quantum search algorithm |12j . to cope with imperfect oracles. (Note that other algorithms, including 
our own algorithm in Theorem |H1 are all based on the robust quantum search algorithm Thus, it 

should be interesting to seek another essentially different quantum algorithm with imperfect oracles. If 
we find a new quantum algorithm that uses 0(T) queries to imperfect oracles with constant probability, 
then we can have a quantum algorithm that uses 0(T/e) queries to imperfect oracles with an e-biased 
oracle based on our method. This is different from the classical case where we need an overhead factor 
of 0(l/e 2 ) by majority voting. 
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Appendix 

Here, we describe the algorithm and the proof of Lemma |3] after providing a few definitions. The 
algorithm Par_Est-Phase((D,x,M) is based on the amplitude estimation algorithm in 0. We refer 
interested readers to [7j. 

Definition 4 For any two real numbers loq,uji £ K, 
d((Jo,u{) = min{|z +u)\ — ujo\}. 
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Thus 2ird(u>o ,ui) is the length of the shortest arc on the unit circle going from e 2muJ0 to e 2mwi . 
Note that < d(uo,u>i) < \ for any wo,wi- 

Definition 5 For any integer M > 1, let gM(x) be a function defined by 
9m(x) 



m (o<x<f: 



*~Ti if<x<M). 

Algorithm( Par_Est_Phase(0,x,M) ) 

1. Start with the state |x}|0}|0)|0). 

2. Apply O to the first and the second registers. 

3. Apply Fm to the third register. 

4. Apply Aa/(Q) controlled by the third register, where Q = —Oil® So)C _1 (I® S x ). Q is applied 
to the first and the second registers. 

5. Apply F^ 1 to the third register. 

6. Apply the unitary transformation U SM to the third and the fourth registers, where U SM maps 
\x)\0) to \x)\g M {x)). 

Proof, (of Lemma OJ) 

When 9 X = 0, the analysis can be performed almost like the following; therefore, we assume 
< 6 X < 7£ for any x. Focusing on the subspace where the first register has a basis state \x), the 
transformation Q x O x is applied to the second register, where Q x = — O x SqO~ S x and j is the number 
designated by the third register. Since this situation is the same as in Theorem 12 in |7], the analysis 
can be done similarly. Let 

|*±\ = — ( 1 ± 1 l^c 

Note that |*+) and \^ x ) are orthonormal eigenvectors of Q x . After Step H3 we can obtain the state 

,M-1 



\x) ® ^^^(Eadjlj)!^))) 
- e-^|*-}^a-.|j}| 3M (j)})Y 



3=0 

.\ I - I. 

(3) 



where \a^J 2 = ^°J^^jj } such that A+ ;j = d(^, ^) and A~j = d(^, 1-k) for any x,j. (Precisely 

speaking, I ct~^ - 1 2 = 1 when A • = 0. This condition means that or M — is an integer.) This 
follows Theorem 11 in 

We will show that the last register has the good estimations of 9 X with high probability in the final 
state. Now, let j+ = [^\ and j+ = \^]. < 6 X < § means < jf < f , thus g M (j+) = 
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holds. We can prove \a + . + | 2 + \a + . + | 2 > \ and \9 X — gM(Ji)\ — ~M n ^e Theorem 11 in jjj. Similarly, 

let jf = M - L^J and ft = M — f^fa] . < X < f means f < jr < M, thus g A / C/'D = * " ¥ 
holds. (This holds when 4f < j~ < M. When jr = M, we consider j. =0, then the following 
sentences will hold.) We can also prove \a~ ,_| 2 + \a~ ._| 2 > and 1^ — SAfC7 t ~)l < xr- Thus the 

probability that the last register \gM{j)) has an estimated value 9 X such that \9 X — 9 X \ < ^ \s 

la + .| 2 la". I 2 

j:|ft.-0itf(j)|<£ 2 i:|^- 9A /(j)|<iV 2 

> \ ^ \ a t,j\ 2 \- \ a x,j\ 2 > _8_ 
^ 2 ^ 2 -vr 2 ' 

Therefore, the well-estimated values of 6 X lie in the last register with probability at least 8/-7T 2 . □ 
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